将下列内容保存为DisableDevice.adm,在组策略的添加/删除模板中导入进行设置。
=============================================================================
CLASS USER
CATEGORY !!ADMDesc
POLICY !!MMC_DeviceManagerX
KEYNAME "Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}"
#if version >= 4
SUPPORTED !!SUPPORTED_Win2k
#endif
EXPLAIN !!MMC_Restrict_Explain
valueNAME "Restrict_Run"
valueON NUMERIC 0
valueOFF NUMERIC 1
END POLICY
POLICY !!MMC_DeviceManager
KEYNAME "Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}"
#if version >= 4
SUPPORTED !!SUPPORTED_Win2k
#endif
EXPLAIN !!DEVMGR_Restrict_Explain
valueNAME "Restrict_Run"
valueON NUMERIC 0
valueOFF NUMERIC 1
END POLICY
End CATEGORY
CLASS MACHINE
CATEGORY !!ADMDesc
POLICY !!USB_UHCD_PARAMS
KEYNAME "SYSTEM\CurrentControlSet\Services\uhcd"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!USB_UHCI_PARAMS
KEYNAME "SYSTEM\CurrentControlSet\Services\usbuhci"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!USB_EHCI_PARAMS
KEYNAME "SYSTEM\CurrentControlSet\Services\usbehci"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!USB_HUB
KEYNAME "SYSTEM\CurrentControlSet\Services\usbhub"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!CD_ROM
KEYNAME "SYSTEM\CurrentControlSet\Services\cdrom"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!Floppy_Disk
KEYNAME "SYSTEM\CurrentControlSet\Services\flpydisk"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
End CATEGORY
[strings]
ADMDesc="自定义策略"
MMC_DeviceManagerX="设备管理器扩展插件"
MMC_DeviceManager="设备管理器"
SUPPORTED_Win2k="至少使用Microsoft Windows 2000"
MMC_Restrict_Explain="Disable ?? 禁用设备管理器扩展插件;Enable ?? 启用设备管理器扩展插件 "
DEVMGR_Restrict_Explain="Disable ?? 禁用设备管理器;Enable ?? 启用设备管理器"
USB_UHCD_PARAMS="USB通用主控制器驱动器"
STARTUPTYPE_HELP="启动类型,3-手动,4-禁用"
STARTUPTYPE="启动类型"
USB_EHCI_PARAMS="Microsoft USB 2.0 Enhanced Host Controller Miniport Driver"
USB_UHCI_PARAMS="Microsoft USB Universal Host Controller Miniport Driver"
USB_HUB="Microsoft USB Standard Hub Driver"
CD_ROM="光驱"
Floppy_Disk="软驱"
==============================================================================
=============================================================================
CLASS USER
CATEGORY !!ADMDesc
POLICY !!MMC_DeviceManagerX
KEYNAME "Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}"
#if version >= 4
SUPPORTED !!SUPPORTED_Win2k
#endif
EXPLAIN !!MMC_Restrict_Explain
valueNAME "Restrict_Run"
valueON NUMERIC 0
valueOFF NUMERIC 1
END POLICY
POLICY !!MMC_DeviceManager
KEYNAME "Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}"
#if version >= 4
SUPPORTED !!SUPPORTED_Win2k
#endif
EXPLAIN !!DEVMGR_Restrict_Explain
valueNAME "Restrict_Run"
valueON NUMERIC 0
valueOFF NUMERIC 1
END POLICY
End CATEGORY
CLASS MACHINE
CATEGORY !!ADMDesc
POLICY !!USB_UHCD_PARAMS
KEYNAME "SYSTEM\CurrentControlSet\Services\uhcd"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!USB_UHCI_PARAMS
KEYNAME "SYSTEM\CurrentControlSet\Services\usbuhci"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!USB_EHCI_PARAMS
KEYNAME "SYSTEM\CurrentControlSet\Services\usbehci"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!USB_HUB
KEYNAME "SYSTEM\CurrentControlSet\Services\usbhub"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!CD_ROM
KEYNAME "SYSTEM\CurrentControlSet\Services\cdrom"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
POLICY !!Floppy_Disk
KEYNAME "SYSTEM\CurrentControlSet\Services\flpydisk"
EXPLAIN !!STARTUPTYPE_HELP
PART !!STARTUPTYPE NUMERIC REQUIRED
valueNAME "START"
MIN 3 MAX 4 DEFAULT 3
END PART
END POLICY
End CATEGORY
[strings]
ADMDesc="自定义策略"
MMC_DeviceManagerX="设备管理器扩展插件"
MMC_DeviceManager="设备管理器"
SUPPORTED_Win2k="至少使用Microsoft Windows 2000"
MMC_Restrict_Explain="Disable ?? 禁用设备管理器扩展插件;Enable ?? 启用设备管理器扩展插件 "
DEVMGR_Restrict_Explain="Disable ?? 禁用设备管理器;Enable ?? 启用设备管理器"
USB_UHCD_PARAMS="USB通用主控制器驱动器"
STARTUPTYPE_HELP="启动类型,3-手动,4-禁用"
STARTUPTYPE="启动类型"
USB_EHCI_PARAMS="Microsoft USB 2.0 Enhanced Host Controller Miniport Driver"
USB_UHCI_PARAMS="Microsoft USB Universal Host Controller Miniport Driver"
USB_HUB="Microsoft USB Standard Hub Driver"
CD_ROM="光驱"
Floppy_Disk="软驱"
==============================================================================
转载于:https://blog.51cto.com/bingyu/69717